Forum Discussion
pawel_jakacki_7
Dec 04, 2012Nimbostratus
I've just received an information from IIS admin, that there is no host header value set and website has appropriate right - script and exec.
Curl shows correct answer
[root@dc_f5_1:Active] config curl -i http://10.X.X.101/IsAlive.aspx
HTTP/1.1 200 OK
Date: Tue, 04 Dec 2012 14:32:27 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: ASP.NET_SessionId=mmcjyk55eyvdlsqivwcpbxej; path=/; HttpOnly
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 1951
Status
0
but ssldump not
New TCP connection 7: 10.X.X.201(42244) <-> 10.X.X.101(80)
1354631633.4696 (0.0011) C>S
---------------------------------------------------------------
GET /IsAlive.aspx HTTP/1.1
Host:
Connection: Close
---------------------------------------------------------------
1354631633.4712 (0.0016) S>C
---------------------------------------------------------------
HTTP/1.1 500 Internal Server Error
Connection: close
Date: Tue, 04 Dec 2012 14:33:55 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 3565
Object reference not set to an instance of an object.
after that server sends TCP FIN